babyserialize

[NISACTF 2022]babyserialize 题目来源：nssctf 题目类型：web 涉及考点：POP链 1. 先做代码审计 <?php include "waf.php"; class NISA{ public $fun="show_me_flag"; public $txw4ever ......

**非常典型的一道POP链构造** 题目源码 ```php fun=="show_me_flag"){ hint(); } } function __call($from,$val){ $this->fun=$val[0]; } public function __toString() { echo ......

[NISACTF 2022]babyserialize <?php include "waf.php"; class NISA{ public $fun="show_me_flag"; public $txw4ever; public function __wakeup() { if($this-> ......